Namely, bad coding practices. Globals everywhere (including "register globals" enabled by default), horrible security practices (tons of XSS vulnerabilities for example), no modularity, mixed concerns, mixing HTML and PHP, etc...